#vulncon26
LightNews LightNews
realsushidude.bsky.social
WHO DID THIS!?!? 🤪😅🤣 #VulnCon2026 #VulnCon26
a sticker of a cartoon squirrel in a robe like a Star Wars character. The squirrel's eyes are bright red. Sticker says "He who must not be named"
April 14, 2026 at 8:46 PM
leekthehack.bsky.social
NEW - AI companies like OpenAI and Anthropic should play a bigger role in software vulnerability disclosures and the CVE program in the future, according to CISA. @firstdotorg.bsky.social #VulnCon26

www.infosecurity-magazine.com/news/ai-comp...
April 15, 2026 at 11:12 AM
realsushidude.bsky.social
I'm getting pumped for this afternoon's CVE-to-CWE Mapping Workshop with my colleague Connor Mullaly at #VulnCon26 #VulnCon2026 ! 1:30 PM to 5:30 PM at Workshop Room 3. There's no shortage of topics we'll be discussing. Whether we get 2 people or 50 people, we'll be ready :)
April 13, 2026 at 5:57 PM
first.org
That's a wrap on CVE/@first.org #VulnCon26 & Annual CNA Summit! 500+ attendees, sessions from CISA, ENISA, NIST, and more, key CVE program updates + new product launches. Thank you to everyone who made it possible!

Read: go.first.org/WabqC

#cybersecurity
April 17, 2026 at 10:30 AM
cveprogram.bsky.social
FULL AGENDA for “VulnCon 2026” now available on the conference website: www.first.org/conference/v...

Register today!

#cve #first #vulncon26 #vulnerability #cybersecurity #infosec
March 6, 2026 at 11:06 PM
first.org
Desert‑deep gratitude to @intigriti.com your Platinum Sponsorship helps drive the future of vulnerability management. 🌵🤠 #VulnCon26 #vulnerabilitymanagement
April 7, 2026 at 5:00 PM
first.org
Nothing like Scottsdale views + cybersecurity brainpower. #VulnCon26 is off to a strong start. 🌅✨#vulnerabilitymanagement 🔗go.first.org/WWSDp
CVE Program & FIRST VulnCon 2026
Save the Date: CVE/FIRST VulnCon 2026 & Annual CNA Summit - Scottsdale (US), April 13–16, 2026
go.first.org
April 13, 2026 at 10:00 PM
first.org
Do you have #vulnerabilitymanagement tools? Show them off at #VulnCon26 and sponsor the community! go.first.org/xt7RF ☀️🤠🌵 #vulnecosystem #IncidentResponse
"Sponsorship Opportunities / CVE Program & FIRST VulnCon 2026
Save the Date: CVE/FIRST VulnCon 2026 & Annual CNA Summit - Scottsdale (US), April 13–16, 2026
www.first.org
January 11, 2026 at 3:40 PM
first.org
🤠Let's help support our cowboys... we mean #cybersecurity professionals! Support #VulnCon26 today with a sponsorship and giddy up!➡️🔗go.first.org/xt7RF #vulnerabilitymanagement #CVEProgram #IncidentResponse
"Sponsorship Opportunities / CVE Program & FIRST VulnCon 2026
Save the Date: CVE/FIRST VulnCon 2026 & Annual CNA Summit - Scottsdale (US), April 13–16, 2026
www.first.org
November 28, 2025 at 4:30 PM
first.org
🤠Let's help support our cowboys... we mean #cybersecurity professionals! Support #VulnCon26 today with a sponsorship and giddy up!➡️🔗go.first.org/xt7RF #vulnerabilitymanagement #CVEProgram #IncidentResponse
"Sponsorship Opportunities / CVE Program & FIRST VulnCon 2026
Save the Date: CVE/FIRST VulnCon 2026 & Annual CNA Summit - Scottsdale (US), April 13–16, 2026
www.first.org
February 28, 2026 at 4:30 PM
realsushidude.bsky.social
It's the second day of #VulnCon26 #VulnCon2026 - the first IRL con I've been to since February 2020 - so I'm starting up estimates of gender representation by visually scanning events and rooms, as done for a few years up to Feb 2020 1/n
April 15, 2026 at 4:16 PM
cveprogram.bsky.social
Day 1 of “CVE/FIRST VulnCon 2026” is here!

Today’s agenda for all 5 tracks: first.org/conference/v...

#vulnerabilitymanagement #vulnerability #cve #first #vulncon26
“CVE/FIRST VulnCon 2026,” April 13–16, 2026 DoubleTree Resort by Hilton Hotel Paradise Valley - Scottsdale, Scottsdale, Arizona, USA Virtual + In-Person
April 13, 2026 at 12:13 PM
cveprogram.bsky.social
Register now for “CVE/FIRST VulnCon 2026” on April 13–16, 2026!!!

In-person & virtual available: first.org/conference/v...

#cve #first #vulncon26 #vulnerabilitymanagement #vulnerability
The CVE Program and FIRST will co-host “VulnCon 2026” at the DoubleTree Resort by Hilton Hotel Paradise Valley - Scottsdale, in Scottsdale, Arizona, USA, on April 13–16, 2026. Registration, both virtual and in-person, is open on the FIRST website.
January 8, 2026 at 1:42 PM
first.org
Conversations don’t stop when an event ends. TLP:CLEAR #VulnCon2026 session recordings are now live on YouTube — featuring talks on CVE quality, VEX, EPSS, AI, supply chain security, and more.

Watch now: www.youtube.com/playlist?lis...

#VulnCon26 #CyberSecurity #CVE
CVE | FIRST VulnCon 2026 & Annual CNA Summit
Join us for the 2026 Vulnerability Management Ecosystem Collaboration, Ideation, and Action Conference (VulnCon), co-hosted by FIRST and the CVE Program.
www.youtube.com
May 29, 2026 at 5:53 PM
cveprogram.bsky.social
Registration is open for “CVE/FIRST VulnCon 2026” on April 13–16, 2026!!!

In-person & virtual available: first.org/conference/v...

#cve #first #vulncon26 #vulnerabilitymanagement #vulnerability
The CVE Program and FIRST will co-host “VulnCon 2026” at the DoubleTree Resort by Hilton Hotel Paradise Valley - Scottsdale, in Scottsdale, Arizona, USA, on April 13–16, 2026. Registration, both virtual and in-person, is open on the FIRST website.
February 18, 2026 at 3:23 PM
first.org
@helpnetsecurity.com interviewed Art Manion, Tharros, @first.org on why vuln databases keep failing us. The fix starts before the data.

Read more: go.first.org/jnofT

#VulnCon26 #CVE
Fixing vulnerability data quality requires fixing the architecture first - Help Net Security
In this Help Net Security interview, Art Manion, Deputy Director at Tharros, examines why vulnerability data across repositories stays inconsistent and
www.helpnetsecurity.com
April 14, 2026 at 6:00 PM
cveprogram.bsky.social
Registration is open for “CVE/FIRST VulnCon 2026” on April 13–16, 2026!!!

In-person & virtual available: first.org/conference/v...

#cve #first #vulncon26 #vulnerabilitymanagement #vulnerability
The CVE Program and FIRST will co-host “VulnCon 2026” at the DoubleTree Resort by Hilton Hotel Paradise Valley - Scottsdale, in Scottsdale, Arizona, USA, on April 13–16, 2026. Registration, both virtual and in-person, is open on the FIRST website.
February 10, 2026 at 1:32 PM
first.org
You asked, and we delivered (again)! 🎉 The hotel room block for #VulnCon26 has been extended once more—you now have until March 25th to lock in your stay. 🌵🏨 Don’t miss your chance to stay close to all the action! 🔗go.first.org/WWSDp

#Scottsdale #RoomBlockExtended
CVE Program & FIRST VulnCon 2026
Save the Date: CVE/FIRST VulnCon 2026 & Annual CNA Summit - Scottsdale (US), April 13–16, 2026
go.first.org
March 23, 2026 at 3:00 PM
first.org
The CVE funding disruption exposed a single point of failure in the infrastructure that underpins global vulnerability management. In this @helpnetsecurity.com interview, ENISA's Nuno Rodrigues Carvalho, #VulnCon26 speaker, breaks down what needs to change.

go.first.org/bSrxK

#cybersecurity
Coordinated vulnerability disclosure is now an EU obligation, but cultural change takes time - Help Net Security
ENISA's Nuno Carvalho on CVE program risks, EU regulatory enforcement, and building a distributed vulnerability disclosure ecosystem.
www.helpnetsecurity.com
April 23, 2026 at 1:00 PM
first.org
What if better vuln mgmt means understanding why vulns keep coming back? 🔍

Alec Summers, MITRE CVE/CWE Project Lead, Principal Cybersecurity Engineer, and @first.org Member, breaks it down ahead of #VulnCon26.

Read the @helpnetsecurity.com Q&A: go.first.org/BZzAf
The case for fixing CWE weakness patterns instead of patching one bug at a time - Help Net Security
MITRE's Alec Summers on CWE vulnerability mapping: why root-cause classification is gaining traction and where semantic gaps slow adoption.
www.helpnetsecurity.com
April 9, 2026 at 6:37 PM
first.org
New on the @first.org blog: Jenn Gile, Co-Founder of @opensourcemalware.bsky.social and #VulnCon26 speaker, on why malicious open source packages don't fit the traditional vulnerability intelligence model.

📖 go.first.org/BwFfv

#cybersecurity #infosec #VulnerabilityManagement
Malicious Packages Don't Fit the Vulnerability Intelligence Model
Malicious open source packages and software vulnerabilities may look alike on the surface, but they demand entirely different response playbooks. Treating a malicious npm or PyPI package like a CVE leaves critical questions unanswered: what did it execute, where did it phone home, and what campaign is it part of? Purpose-built malicious package intelligence infrastructure is needed to answer those questions.
www.first.org
April 22, 2026 at 5:30 PM
first.org
📰 Maria Korolov, @csoonline.bsky.social covered NIST's major shift in CVE handling announced at #VulnCon26, as the National Vulnerability Database buckles under a 30,000+ backlog and submissions grow 263% since 2020.

Read: go.first.org/9k8UO

#cybersecurity #infosec
NIST cuts down CVE analysis amid vulnerability overload
The agency will only add enrichment details to CVEs in limited cases going forward, prioritizing known exploited flaws and vaguely defined ‘critical software.’
www.csoonline.com
April 17, 2026 at 8:00 PM
first.org
📰 Kevin Poireault, Infosecurity Magazine, sat down with @first.org CEO Chris Gibson at #VulnCon26 in Scottsdale, AZ, unpacking the AI-driven vulnerability tsunami reshaping #VulnerabilityManagement.

Read more: go.first.org/lM4sa

#CVE #CyberDefense #cybersecurity #infosec
FIRST CEO Calls for CVE Collaboration amid AI Vulnerability Tsunami
FIRST CEO Chris Gibson urged global CVE collaboration and integrating AI companies to combat automated cyber threats
www.infosecurity-magazine.com
April 17, 2026 at 5:00 PM
first.org
Our last day in Scottsdale and the momentum is still going strong — this community doesn’t slow down. #VulnCon26🦎✨#CVEProgram #CVSS 🔗go.first.org/WWSDp
CVE Program & FIRST VulnCon 2026
Save the Date: CVE/FIRST VulnCon 2026 & Annual CNA Summit - Scottsdale (US), April 13–16, 2026
go.first.org
April 16, 2026 at 5:00 PM
first.org
Afternoon sessions are heating up (and not just because we’re in the desert). #VulnCon26🔥🦎 #CVEProgram #CVSS 🔗go.first.org/WWSDp
CVE Program & FIRST VulnCon 2026
Save the Date: CVE/FIRST VulnCon 2026 & Annual CNA Summit - Scottsdale (US), April 13–16, 2026
go.first.org
April 15, 2026 at 10:00 PM